CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-42037

CVE-2022-42037 concerns the Python PyPI package d8s-asns . The description states a third‑party backdoor, democritus-csv , was inserted into version 0.1.0 , creating a potential code execution vulnerability. The CVSS v3.1 score is 9.8 (CRITICAL) with high impact on confidentiality, integrity, and...